CVE-2022-23732

CVE-2022-23732 is a path traversal vulnerability in the GitHub Enterprise Server management console, affecting all versions prior to 3.5. This flaw allows for the bypass of CSRF protections, potentially leading to privilege escalation if an attacker targets a logged-in user. With a CVSS score of 8.8 (HIGH), it has a network attack vector and low attack complexity, but requires user interaction to exploit, with high impacts on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.